HHS Peptide Enforcement Discretion Policy: What It Means for Clinics

The HHS enforcement discretion policy on 503A peptide compounding, announced in the Federal Register on October 30, 2026, says HHS does not intend to take enforcement action against a state-licensed pharmacy, federal facility or licensed physician that compounds six named peptides under ten conditions. The policy is interim and non-binding, it is not FDA approval, and it stops at section 503A: outsourcing facilities are not covered.

What the HHS peptide policy says, at a glance

Which six peptides are on the interim access list?

Appendix A names six substances. Appendix B fixes the form of each and the routes the policy reaches, and anything outside those routes is outside the policy.

• BPC-157 acetate: subcutaneous, intramuscular, oral and topical dosage forms. Oral forms need documented human bioavailability.
• TB-500 acetate: subcutaneous or intramuscular injectable dosage forms.
• Epitalon acetate: subcutaneous or intramuscular injectable dosage forms, dispensed in intermittent courses.
• Semax free base: intranasal use only.
• KPV acetate: topical and oral dosage forms. Oral forms need documented human bioavailability.
• MOTS-c acetate: subcutaneous or intramuscular injectable dosage forms.

Why did HHS issue the policy?

All six peptides sat on FDA's Category 2 list, the bulk substances that may present significant safety risks in compounding, from September 2023 until April 22, 2026. FDA's Center for Drug Evaluation and Research recommended against placing them on the 503A bulks list; the Pharmacy Compounding Advisory Committee, meeting July 23 and 24, 2026, voted in favor of inclusion. HHS says it issued the policy to discourage the widespread use of research-use-only peptides from foreign manufacturers, which it describes as a safety risk to U.S. patients, by allowing limited compounding under safeguards while FDA completes its review.

The policy is a draft. HHS says it does not establish any rights, is not binding on HHS or the public, and may be revisited in whole or in part. FDA's future rulemaking may add some or all of the peptides to the 503A bulks list, or exclude them, and that final rule ends the policy for the peptide it addresses.

What are the ten conditions?

Enforcement discretion applies only when all ten circumstances are present. Paraphrased from the policy:

1. 1Interim access list: the peptide bulk drug substance appears in Appendix A.
2. 2Identity: the substance has the identity, including amino acid sequence, structure, molecular weight and formula, and the route limits described in Appendix B.
3. 3Characterization: the bulk substance comes from a facility registered under section 510 and is characterized in a valid certificate of analysis with test results consistent with FDA's criteria, which the policy sets out as a testing standard covering identity, purity, potency, endotoxins, heavy metals, microbial contamination and impurities.
4. 4Original manufacturer: the manufacturer, not a repacker or distributor, is registered with FDA under section 510, is in compliance with current good manufacturing practice, and its physical location is on the certificate of analysis. A repacker or reseller must have validated the manufacturer and its certificate.
5. 5Reporting: the compounder reports products compounded, serious adverse events and product quality issues to FDA through MedWatch and to the states where the product is compounded and sent, and the patient labeling explains how to report them.
6. 6Labeling: the product carries the statement "This is a compounded drug product. Not for resale."
7. 7Single ingredient: the product contains only one active pharmaceutical ingredient from Appendix A.
8. 8Oral forms: a peptide compounded as an oral dosage form requires documentation that the specific formulation achieves adequate oral bioavailability in humans.
9. 9Device: the only drug delivery device co-packaged with or containing the drug is an FDA 510(k)-cleared syringe.
10. 10Everything else: the product is compounded in compliance with all other FD&C Act requirements, including that it is not compounded under insanitary conditions and that section 503A's patient-specific prescription requirement is met.

What does the policy not do?

• It does not approve any peptide. Compounded drugs remain unapproved, and marketing one as safe, effective or FDA-approved is the claim FDA has warned telehealth companies about.
• It does not place any peptide on the 503A bulks list. That happens only through rulemaking, and FDA may still decide against it.
• It does not cover outsourcing facilities under section 503B, office-use stock, or compounding without a patient-specific prescription.
• It does not cover peptide blends, peptides outside Appendix A, routes outside Appendix B, or any device other than a cleared syringe.
• It does not bind HHS. The policy can be narrowed or withdrawn if a safety signal or product quality issue appears.

What does the HHS peptide policy mean for a telehealth clinic?

For a clinic that prescribes through a 503A pharmacy, the policy turns a product category that was effectively closed into one with a written checklist. The work is in meeting the checklist, and most of it falls on the pharmacy and the formulary, not on the website.

1. 1Keep the model prescription-based. Every patient is evaluated by a licensed clinician in the patient's state and receives a patient-specific prescription; nothing in the policy loosens that.
2. 2Choose the pharmacy for its sourcing. Ask for the certificate of analysis for each lot, the original manufacturer's FDA registration and facility identifier, and the pharmacy's reporting procedure. How to choose and verify a compounding pharmacy covers the questions.
3. 3Build the formulary as single-ingredient products in the Appendix B routes. Which of the six peptides a clinic can offer, and how goes peptide by peptide.
4. 4Skip pens, blends and oral forms without bioavailability documentation. Each one takes the product outside the policy.
5. 5Make sure labeling carries the required statement and the reporting instructions, and that the pharmacy reports products compounded and serious adverse events to FDA and the states.
6. 6Review marketing before launch. Describe the products as compounded and unapproved, avoid efficacy claims the evidence does not support, and keep the enforcement discretion policy out of patient-facing copy as if it were an endorsement.
7. 7Check state rules. State boards decide who may prescribe by telehealth and what a pharmacy may ship; the federal policy changes none of that. The FDA peptide compounding rules for telehealth clinics covers the 503A and 503B framework the policy sits inside.

What does it mean for LegitScript certification?

LegitScript certification is what Google and several payment processors require before a prescription-related offer can advertise or process payments. LegitScript published an update saying that, as of November 2, 2026, offering one of the six covered peptides should not by itself prevent a merchant from achieving certification, provided the offering meets the policy's conditions and LegitScript's other standards. Its limits track HHS's: 503A only, a single active ingredient, the listed routes, oral forms with bioavailability documentation, cleared syringes rather than pens, and no suggestion that enforcement discretion is approval. Certification does not guarantee advertising or payment access. Ad platforms, processors and card brands keep their own policies, and each will read the policy for itself.

What changed recently

September 2023: FDA placed the six peptides in Category 2, the nominated bulk substances that may present significant safety risks. April 22, 2026: they left Category 2 without a change in status under section 503A. July 23 and 24, 2026: the Pharmacy Compounding Advisory Committee voted in favor of listing them, against CDER's recommendation. October 30, 2026: HHS announced the interim enforcement discretion policy in the Federal Register, with a two-week comment period. November 2, 2026: LegitScript updated its review approach for certified merchants.

How MDLaunchr fits

MDLaunchr is a white-label telehealth platform, not a pharmacy or a prescriber. Its provider and pharmacy network routes each prescription to a licensed pharmacy for the patient's state, and a peptide program's formulary is checked against FDA's current lists before launch and whenever they change. Every prescribing decision stays with the independently licensed clinician.

Disclaimer

This article summarizes a federal policy document for business planning and is not legal, medical or pharmacy advice. The policy is a draft that HHS may change, and state rules apply on top of it. Confirm current requirements with a licensed attorney and the relevant boards before offering any compounded peptide.